Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-d5awc6MqJafC4AohVUMD6lKHU.cer
File:                     T-d5awc6MqJafC4AohVUMD6lKHU.cer (raw, json)
Hash identifier:          qlxn+aJ/YUYUX6FFp3m8yg7VZ8HV3akhQRrAv5iyjJ8=
Subject key identifier:   4F:E7:79:6B:07:3A:32:A2:5A:7C:2E:00:A2:15:54:30:3E:A5:28:75
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01D578
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A91F6104/24798FCA11BA11EA89B16F6EC4F9AE02/T-d5awc6MqJafC4AohVUMD6lKHU.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A91F6104/24798FCA11BA11EA89B16F6EC4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 19:41:01 +0000
Certificate not after:    Wed 01 May 2024 00:00:00 +0000
Subordinate resources:    AS: 137049
                          IP: 103.103.6.0/23

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 02:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120184 (0x1d578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec 31 19:41:01 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=A91F6104/serialNumber=4FE7796B073A32A25A7C2E00A21554303EA52875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:ea:df:68:12:2a:bb:9b:f8:65:1f:55:90:
                    7a:4e:0f:29:1f:8b:64:4b:c1:03:24:e9:4c:1f:05:
                    b4:28:fb:7b:9e:b0:67:a9:5b:a5:a1:02:df:f0:c8:
                    69:fb:e6:92:d2:f3:08:dd:00:9c:40:ab:9f:ed:48:
                    2e:3c:4b:22:88:8f:3d:59:54:88:b8:b8:c8:09:2b:
                    fd:01:48:d7:9c:e1:ea:33:b6:64:f0:2b:52:22:dd:
                    a0:c8:6f:c3:0e:83:cd:88:bc:89:46:de:1a:d8:23:
                    e8:49:4a:ed:21:e2:02:ea:10:89:9e:a2:4b:6d:56:
                    bc:a0:a4:c1:ff:de:a3:a0:c9:69:25:b6:8a:39:b1:
                    f4:10:86:52:d9:4e:5c:d2:2d:af:48:88:1b:eb:1b:
                    46:ab:51:97:fe:41:d1:ba:f5:c2:75:29:e3:c8:6f:
                    92:b8:92:cb:fa:d7:84:81:08:5b:37:a4:cc:a7:bc:
                    e6:c2:72:2a:f3:6b:a0:38:8f:af:25:2d:c3:84:89:
                    2f:6c:7e:b7:03:27:f9:6d:dc:3b:31:93:41:65:cc:
                    b8:aa:53:86:21:3b:85:2f:18:0f:47:a4:ba:25:ed:
                    fa:8f:e8:05:2d:49:83:ae:36:a0:38:9d:ee:0e:85:
                    b7:e6:38:1b:ef:63:13:6a:37:af:a6:6b:b7:31:78:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:79:6B:07:3A:32:A2:5A:7C:2E:00:A2:15:54:30:3E:A5:28:75
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91F6104/24798FCA11BA11EA89B16F6EC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91F6104/24798FCA11BA11EA89B16F6EC4F9AE02/T-d5awc6MqJafC4AohVUMD6lKHU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  137049

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:41:58:fb:f0:1f:d8:74:da:c2:97:b2:cf:65:7a:99:4b:
         46:df:4f:79:e8:87:a6:bb:58:e1:59:1f:68:fc:3e:6f:fc:38:
         94:82:2f:cf:53:64:32:d4:62:52:ca:e5:3b:da:1d:0b:6f:ad:
         4b:c4:65:e1:0d:72:3d:98:0c:56:9e:39:95:3a:7a:d1:a1:7a:
         d3:fc:9e:76:50:8c:9d:65:1f:3a:8d:6b:69:d6:41:f7:85:d4:
         2d:26:a9:d2:45:38:ce:8d:f3:97:e0:f3:d1:3e:c3:69:9e:74:
         56:03:d5:d6:a7:ac:e8:7d:5c:75:8d:41:16:5e:71:23:0e:08:
         b0:e4:8e:21:c3:0e:2c:0a:d6:52:98:d4:03:96:11:d3:2a:1e:
         df:f0:d5:5b:7c:66:c5:49:66:2c:ff:22:7e:05:60:25:d9:c6:
         77:39:d2:be:0e:98:30:02:0c:a4:64:32:b1:e6:00:a0:59:a4:
         0e:81:59:ab:6e:2e:37:b6:19:bd:b0:55:f7:c3:c3:ff:f4:e1:
         bc:18:55:c4:9a:09:14:85:dd:10:30:3e:ea:ef:9f:4f:24:ac:
         f8:03:58:66:c5:5b:48:e1:7d:8d:e3:48:48:cb:61:77:ad:41:
         1c:70:9e:2e:d8:5c:2f:72:4e:19:8c:15:1a:19:13:09:c7:9b:
         bf:f0:46:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 05:54:33 2024 by rpki-client on console-ams.rpki-client.org